Kubernetes

Gateway API resource

# Get API gateway resources
 k api-resources --api-group gateway.networking.k8s.io
# Check CRD version and release channel. Check annotations
 helm show crds oci://docker.io/envoyproxy/gateway-helm --version v1.0.2 | less

GKE cluster

Single node, zonal cluster with no logging or monitoring. Minimal install with SPOT instance.

gcloud beta container --project "master-project-373217" clusters create "cluster-1" --zone "us-west1-a" --no-enable-basic-auth --cluster-version "1.30.5-gke.1014001" --release-channel "regular" --machine-type "e2-medium" --image-type "COS_CONTAINERD" --disk-type "pd-standard" --disk-size "50" --metadata disable-legacy-endpoints=true --scopes "https://www.googleapis.com/auth/devstorage.read_only","https://www.googleapis.com/auth/logging.write","https://www.googleapis.com/auth/monitoring","https://www.googleapis.com/auth/servicecontrol","https://www.googleapis.com/auth/service.management.readonly","https://www.googleapis.com/auth/trace.append" --spot --num-nodes "1" --enable-ip-alias --network "projects/master-project-373217/global/networks/master-vpc" --subnetwork "projects/master-project-373217/regions/us-west1/subnetworks/prod-k8s-network" --no-enable-intra-node-visibility --default-max-pods-per-node "110" --security-posture=standard --workload-vulnerability-scanning=disabled --enable-dataplane-v2 --no-enable-master-authorized-networks --addons HorizontalPodAutoscaling,HttpLoadBalancing,GcePersistentDiskCsiDriver --enable-autoupgrade --enable-autorepair --max-surge-upgrade 1 --max-unavailable-upgrade 0 --binauthz-evaluation-mode=DISABLED --no-enable-managed-prometheus --enable-shielded-nodes --node-locations "us-west1-a"

Retrieve k8s secret with plugin

Install kubectl-view_secret plugin using krew kubectl view-secret -n argocd argocd-initial-admin-secreta